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DETAILED ACTION 
Notice to Applicant 

This communication is in response to tlie amendment filed on 06/1 1/2007. 
Claims 1-17, 19-24 and 26-30 remain pending. Claims 1-2, 4, 6, 8, 17, 24 and 30 have 
been amended. Claims 18 and 25 have been canceled. 

Response to Arguments 

Applicant's arguments have been considered but are moot in view of the new 
ground(s) of rejection. 

Claim Rejections - 35 USC §112 
The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Claims 3, 9-10, 14, 16, 19-23, 27-29 recites the limitation "the computing module" 
in the following claims. There is insufficient antecedent basis for this limitation in the 
claim. The examiner will interrupt this to be the excluding and non-conforming modules. 

Claim Rejections • 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 
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(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

Claims 1-17, 19-24 and 26-30 are rejected under 35 U.S.C. 102(e) as being 
anticipated by llnicki et al. (7,069,434 B1) as best Interrupted in light of the U.S.C 1 12 
rejection. 

Claim 1 

llnicki discloses a secure data processing device, the device comprising: a secure 
function module configured to receive an excluding computing module context (see at 
least, column 2, lines 42-55, Figure 1 , browser and measuring agent), and to transact 
secure function with an excluding computing module in which the secure function 
module receives the excluding computing module's context (see at least. Figure 1, 
column 2, lines 42-55: the examiner notes that the measuring agent resides in the 
browser which would receive secure content to transact); 

the secure function module further configured to receive an non-conforming computing 
module context (see at least. Figure 4, column 4, lines 6-10: Agent), and to transact 
secure functions with a non-conforming computing module in which the secure function 
module receives the non-conforming computing module's context (see at least. Figure 
4: "the browser launches agent"); 
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a communication module configured to communicate with the excluding computing 
module, the excluding computing module configured to exclusively transact the secure 
function with the secure function module (see at least, column 2, lines 42-55: agent 
communicates data to the web server through a secure channel e.g. SSL), the 
communication module further configured to communicate with the non-conforming 
computing module, the non-conforming computing module configured to transact the 
secure function with the secure function module (see at least, Figure 4, column 4, lines 
21-29: "transferring data between an application server and an agent of the application 
server through a non-trusted node"); and 

a context module configured to set the context of the secure function module to the 
excluding computing module context and, to set the context of the secure function 
module to the non-conforming computing module context (see at least, column 10, lines 
55-64: the examiner notes in a case of a non trusted environment the agent 
communicates via the non conforming computing module, in a case of a trusted 
environment communicates via the secure connection all handled by the Agent). 

Claim 2 

llnicki discloses the device of claim 1, wherein context module is configured to set the 
context of the secure function module to either the excluding computing module context 
or the non-conforming computing module context (see at least, column 10, lines 55-64: 
the examiner notes in a case of a non trusted environment the agent communicates via 
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the non conforming computing module, in a case of a trusted environment 
communicates via the secure connection all handled by the Agent). 

Claim 3 

llnicki discloses the device of claim 1, wherein context module is configured to set the 
context of the secure function module to the first computing module context and to the 
second computing module context (see at least, column 10, lines 55-64: the examiner 
notes, in a case of a non trusted environment the agent communicates via the non 
conforming computing module, in a case of a trusted environment communicates via the 
secure connection all handled by the Agent). 

Claim 4 

llnicki discloses the device of claim 1 , wherein context module is configured to arbitrate 
the setting of the context of the secure function module to the excluding computing 
module context and to the non-conforming computing module context (see at least, 
column 10, lines 55-64: the examiner notes in a case of a non trusted environment the 
agent communicates via the non conforming computing module, in a case of a trusted 
environment communicates via the secure connection all handled by the Agent). 

Claim 5 

llnicki discloses the device of claim 1 , wherein the context module is configured to set 
the context of the secure function module responsive to an electrical signal (see at 
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least, Figure 4: the examiner notes the browser launching the agent is interrupt to be an 
electrical signal residing in a computer). 

Claim 6 

llnicki discloses the device of claim 5, wherein the electrical signal is an address (see at 
least, Figure 4: the examiner notes the agent communicating to the web server via the 
launch of the browser to be an electric signal containing an address). 

Claim 7 

llnicki discloses the device of claim 1 , wherein the context module is configured to set 
the context of the secure function module responsive to data communicated to the 
communication module (see at least, column 10, lines 55-64: the examiner notes in a 
case of a non trusted environment the agent communicates via the non conforming 
computing module, in a case of a trusted environment communicates via the secure 
connection all handled by the Agent). 

Claim 8 

llnicki discloses a computing module, the module comprising: an identification module 
configured to identify an excluding computing module to a secure computing module 
and set the context of the secure computing module to an excluding computing module 
context (see at least, column 10, lines 55-64: the examiner notes in a case of a non 
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trusted environment the agent communicates via the non conforming computing 
module, in a case of a trusted environment communicates via the secure connection all 
handled by the Agent; Figure 1, column 2, lines 42-55: the examiner notes that the 
agent resides in the browser which would receive secure content to transact), 
the identification module further configured to identify a non-conforming computing 
module to the secure computing ipodule and set the context of the secure computing 
module to a non-conforming computing module context (see at least, column 10, lines 
55-64: the examiner notes in a case of a non trusted environment the agent 
communicates via the non conforming computing module, in a case of a trusted 
environment communicates via the secure connection all handled by the Agent; column 
4, lines 6-10: Agent); 

an address module configured to address a secure function of the secure computing 
module (see at least, Figure 4: the examiner notes agent derives shared secret from its 
and apps public keys); 

and a data module configured to exchange data with the secure computing module (see 
at least, Figure 4: "the browser launches agent"). 

Claim 9 

llnicki discloses the module of claim 8, the identification module further configured to 
identify the computing module with an address communicated from the address module 
(see at least. Figure 4: the examiner notes agent derives shared secret from its and 
apps public keys and the browser launches agent). 
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Claim 10 

llnicki discloses the module of claim 8, the identification module further configured to 
identify the computing module with data communicated from the data module (see at 
least, Figure 4: the examiner notes agent derives shared secret from its and apps public 
keys and the browser launches agent). 

Claim 11. 17. 24 and 30 

llnicki discloses a secure data processing system, the system comprising: 
a secure computing module configured to identify a computing module responsive to the 
computing module initiating transacting a secure function with the secure computing 
module, the secure computing module further configured to set the context of the 
secure computing module to the computing module context, wherein the secure 
computing module is configured to transact the secure function with the computing 
module (see at least, column 10, lines 55-64: the examiner notes in a case of a non 
trusted environment the agent communicates via the non conforming computing 
module, in a case of a trusted environment communicates via the secure connection all 
handled by the Agent); 

an excluding computing module configured to initiate transacting the secure function 
with the secure computing module, the excluding computing module further configured 
to exclusively transact the secure function with the secure computing module (see at 
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least, column 10, lines 55-64: the examiner notes in a case of a non trusted 
environment the agent communicates via the non conforming computing module, in a 
case of a trusted environment communicates via the secure connection all handled by 
the Agent; Figure 1, column 2, lines 42-55: the examiner notes that the agent resides in 
the browser which would receive secure content to transact); and 
a non-conforming computing module configured to initiate transacting the secure 
function with the secure computing module, the non-conforming computer module 
further configured to transact the secure function with the secure computing module 
(see at least, column 10, lines 55-64: the examiner notes in a case of a non trusted 
environment the agent communicates via the non conforming computing module, in a 
case of a trusted environment communicates via the secure connection all handled by 
the Agent; column 4, lines 6-10: Agent). 

Claim 12 

llnicki discloses the system of claim 11, wherein either the excluding computing module 
or the non-conforming computing module transacts the secure function with the secure 
computing module (see at least, column 10, lines 55-64: the examiner notes in a case of 
a non trusted environment the agent communicates via the non conforming computing 
module, in a case of a trusted environment communicates via the secure connection all 
handled by the Agent). 



Application/Control Number: 10/748,056 Page 10 

Art Unit: 2139 

Claim 13. 19. 20&26 

llnicki discloses the system of claim 11, wherein the excluding computing module and 
the non-conforming computing module transact the secure function with the secure 
computing module (see at least, column 10, lines 55-64: the examiner notes in a case of 
a non tmsted environment the agent communicates via the non conforming computing 
module, in a case of a trusted environment communicates via the secure connection all 
handled by the Agent). 

Claim 14.21 &27 

llnicki discloses the system of claim 1 1 , wherein the secure computing module identifies 
the computing module from an electrical signal (see at least, Figure 4: the examiner 
notes the browser launching the agent is interrupt to be an electrical signal residing in a 
computer). 

Claim 15. 22 & 28 

llnicki discloses the system of claim 14, wherein the electrical signal is an address (see 
at least. Figure 4: the examiner notes the agent communicating to the web server via 
the launch of the browser to be an electric signal containing an address).. 
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Claim 16. 23&29 

llnicki discloses the system of claim 1 1 , wherein the secure computing module identifies 
the computing module firom a data value (see at least, Figure 7: "collective measured 
data"). 



Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from \he 
examiner should be directed to Kari L. Schmidt whose telephone number is 571-270- 
1385. The examiner can normally be reached on Monday - Friday: 7:30am - 5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-270-2385. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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